Security Scan Report: lendingtreeusa.vercel.app

Redirected to:
https://lendingtreeusa.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 39 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://lendingtreeusa.vercel.app

Effective URL:
https://lendingtreeusa.vercel.app/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Non-official vercel.app page dresses itself as LendingTree ('Lending Tree') and runs a personal-loan application funnel. Classic brand impersonation; no verified credential form, but do not submit personal or financial data.

Risk Factors (5)
Impersonation of a different entity's brand (LendingTree) on a domain that is not that brand's official domain
Typosquat-style hostname (lendingtreeusa.vercel.app) using a financial brand name
Financial/loan application funnel requesting user details without any verifiable corporate identity
Free instant-host subdomain with unknown actual creation date and no domain reputation
Page addresses the reader as a trusted lender ('America's trusted online EFT service') it does not appear to be
Domain age information unavailable

Details

Page Title

Lending Tree - Personal Loans with No Fees

Scan Type

public

Domain Name Analysis

The domain name 'lendingtreeusa.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'lendingtreeusa'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and four consonants. Splitting it apart reveals two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://lendingtreeusa.vercel.app

Page Load Overview

1.24s
Total Load Time
349 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,150 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
65%
real estate property
43%
government public service
30%
documentation technical
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1964.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
392--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F043A4393105DD2DED6B5D58717EBD39518EC1ABCA5BC9A4E2DCC9310AC38389B939C0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:6SmzQuDdYtebjGYKYnYNUYyYm7YMYNrb2RVFRQqL7NYVYr3lCWxYWYwMgPMLtmL6:n2g/07MIMD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60045:CUJKaAAQhFzBAXQ1LgDIvl0IFEEUDghyoCmCBgQEbIBUAAmixTYZCgsCtN9CMEzRESGlE+iEBVKmhNAAIRC7gAfAaF0AkMSe

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fc820e0e0cfce7fe
Perceptual Hash:970ee0ead6a25c3a
Difference Hash:4d32746c69890c14
Wavelet Hash:fcb00e060ce0e7fe
Color Hash:#7994d2

Other Hashes

Crop Resistant:4d32746c69890c14

Scan History

Scan history not available

Unable to load historical scan data